Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498/290b8093-ddad-32aa-8a33-368247e9c55b.roa
File: 290b8093-ddad-32aa-8a33-368247e9c55b.roa (raw, json)
Hash identifier: MPNNHf8VgBeMFwApMkWSYXWiZkwALWdgR19n6dL2Q2I=
Subject key identifier: 50:76:BF:01:84:1B:C5:0A:70:2C:8D:49:E7:A6:5F:A3:B6:01:E8:52
Certificate issuer: /CN=aae4f0de-2296-435c-b411-b16981804498
Certificate serial: 010D0C9F43285847F584DFF1CFB6B27DBEC1C100
Authority key identifier: 1F:D3:27:64:4D:58:B9:AF:C5:7F:44:82:4D:FB:8F:B7:1E:18:CF:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498/290b8093-ddad-32aa-8a33-368247e9c55b.roa
Signing time: Fri 22 Nov 2024 02:00:40 +0000
ROA not before: Fri 22 Nov 2024 02:00:40 +0000
ROA not after: Thu 20 Feb 2025 02:00:40 +0000
asID: 398268
IP address blocks: 199.58.88.0/24 maxlen: 24
199.58.89.0/24 maxlen: 24
199.58.90.0/24 maxlen: 24
2602:fd7b::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:f5:84:df:f1:cf:b6:b2:7d:be:c1:c1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aae4f0de-2296-435c-b411-b16981804498
Validity
Not Before: Nov 22 02:00:40 2024 GMT
Not After : Feb 20 02:00:40 2025 GMT
Subject: CN=d9d40044-3e39-45ee-acb8-a932f2d769c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:45:24:22:8c:74:f7:90:d4:1c:d8:e3:49:3b:
99:7d:25:fc:32:b3:bf:14:10:de:52:4d:2c:de:8f:
d0:08:b9:d6:eb:46:2c:4f:9a:b4:5c:de:aa:79:74:
ef:6a:ad:d3:6b:5f:00:da:52:53:4c:15:27:6e:cc:
ad:d7:c9:a1:08:d2:6f:8a:4d:d9:4d:02:08:a3:6e:
f4:95:01:4d:59:1f:c1:72:14:f0:4a:e6:b2:27:a5:
f3:f5:73:b4:68:7d:31:f2:9a:68:75:d4:99:7a:cc:
1d:da:98:ab:71:e2:a5:8d:58:fc:11:aa:de:7d:81:
f0:e0:ea:6c:19:f8:97:9e:2c:95:2a:0d:3d:d9:8c:
6e:31:b2:56:21:31:db:2c:d6:3d:3c:c2:83:62:d2:
13:21:97:49:64:e5:90:db:a9:a2:fb:1e:1c:37:12:
50:ad:ed:9e:47:50:13:24:9c:de:c6:fc:03:48:cc:
d4:1d:9e:f8:c2:e1:42:18:76:1c:5f:15:88:c7:94:
0b:f4:aa:e6:84:74:ee:13:12:e8:00:c8:83:8f:18:
e8:45:90:71:9f:7c:61:dc:b4:9e:d2:5d:ca:e3:a5:
d0:1d:72:76:b6:62:f4:39:dd:d6:96:9d:e7:16:11:
9c:19:50:8f:73:3e:39:0b:e4:8a:c9:05:1c:87:00:
f5:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:76:BF:01:84:1B:C5:0A:70:2C:8D:49:E7:A6:5F:A3:B6:01:E8:52
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498/290b8093-ddad-32aa-8a33-368247e9c55b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498/aae4f0de-2296-435c-b411-b16981804498.crl
X509v3 Authority Key Identifier:
keyid:1F:D3:27:64:4D:58:B9:AF:C5:7F:44:82:4D:FB:8F:B7:1E:18:CF:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498.cer
sbgp-ipAddrBlock: critical
IPv4:
199.58.88.0-199.58.90.255
IPv6:
2602:fd7b::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:68:e6:02:d3:63:cd:43:d4:d0:78:f4:3e:56:89:4d:9a:50:
64:85:d9:6e:a6:c7:ed:45:55:1f:d6:bc:b3:fd:b9:b3:51:a2:
33:11:90:c3:02:81:dc:7f:2c:eb:f3:38:ef:65:52:cd:ef:1c:
ce:2b:f9:f8:74:90:7e:5f:1c:ef:0e:75:75:82:70:0d:d4:0b:
35:08:40:ac:80:32:f2:a8:20:46:74:48:fd:8b:45:5b:f4:a2:
f5:e5:a6:eb:8d:63:83:a1:57:1a:9c:99:cb:21:82:b2:63:11:
52:82:a1:b3:e7:0b:63:98:bd:6a:9b:fd:ab:8f:c5:85:77:e7:
a8:ce:0e:27:39:35:e9:40:cb:8b:fe:ef:29:c4:e9:73:e1:97:
83:37:4b:9f:4b:2c:da:5b:a6:68:b3:72:0f:57:11:dc:cd:96:
1e:ec:cc:e6:e3:ad:f4:0f:d7:71:1e:41:96:06:07:d2:20:50:
0e:68:f8:1f:92:e4:7e:55:01:ac:b4:5e:86:18:41:83:32:23:
0d:2e:4b:1c:a0:38:65:f5:44:6e:a6:ea:71:1b:81:e7:56:2f:
03:e9:3e:d7:4c:83:4a:a7:64:91:0e:85:21:a8:bb:b2:c1:3c:
4e:58:2e:d8:6c:6e:0f:cc:46:3b:8b:d8:d9:d0:d1:cc:a0:93:
91:5f:87:88
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 5 03:59:45 2025 by rpki-client